CVE-2026-103093
ServiceNow ServiceNow AI Platform
- ServiceNow ServiceNow AI Platform
- Critical
- CVSS 9.4
- No fixed version listed
Summary
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further…
From the CVE record.
Read the original description
CVE record
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access.
ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.
What to do
No fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| ServiceNow ServiceNow AI Platform | before Yokohama Patch 13 Hot Fix 4a; before Zurich Patch 10 Hot Fix 3b; before Zurich Patch 12; before Zurich Patch 13; before Australia Patch 5 | None listed |
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.4 (v4.0, scored by SN)
- Weakness
- CWE-284: Improper Access Control
- Vendor
- ServiceNow, ServiceNow AI Platform
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.